Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

IrfanView

Buffer Overflow vulnerability in IrfanView 32bit v.4.66 allows a local attacker to cause a denial of service via a crafted file. Affected component is IrfanView 32bit 4.66 with plugin formats.dll.

CVE-2024-31007 is a buffer overflow vulnerability classified under CWE-120, affecting the 32-bit version 4.66 of IrfanView, a popular image viewer, specifically within the plugin formats.dll component. The vulnerability arises when the application processes a crafted file that triggers a buffer overflow condition, leading to memory corruption. This flaw can be exploited by a local attacker who can convince a user to open a maliciously crafted file, causing the application to crash or become unresponsive, resulting in a denial of service. The vulnerability does not allow for privilege escalation, code execution, or data leakage, as it impacts only availability. The attack vector is local (AV:L), requires low attack complexity (AC:L), no privileges (PR:N), but does require user interaction (UI:R). The scope remains unchanged (S:U), and the impact is limited to availability (A:H) with no confidentiality or integrity impact. No public exploits or patches are currently available, and the vulnerability was published in October 2024. The plugin formats.dll is a critical component for handling various image formats, making this vulnerability relevant to users who rely on this plugin for image viewing or processing.

Detailed information about CVE-2024-31007: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-31007: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-31007: n/a

irfanview

An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS).

CVE-2024-44915 identifies a vulnerability in the EXR image file processing component of IrfanView version 4.67.1.0, specifically within the EXR!ReadEXR function at offset 0x4eef0. The flaw allows an attacker to craft a specially designed EXR file that, when opened by the vulnerable IrfanView version, causes an access violation leading to a Denial of Service (DoS) condition. This vulnerability is classified under CWE-284, indicating an issue related to improper access control during file parsing. The attack vector requires local access and user interaction, as the victim must open the malicious EXR file for the exploit to trigger. The CVSS v3.1 base score is 5.5, reflecting a medium severity level, with the vector string AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. This means the attack requires local access with low complexity, no privileges, and user interaction, impacting availability only. There is no known exploitation in the wild at this time, and no patches have been released. The vulnerability could be leveraged by attackers to disrupt services or workflows relying on IrfanView for image viewing or processing, particularly in environments where EXR files are common. The lack of confidentiality or integrity impact limits the scope to availability disruption. Organizations should monitor for updates and avoid opening untrusted EXR files until a patch is available.

Detailed information about CVE-2024-44915: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-44915: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-44915: n/a


CVE-2024-31007: n/aCVE-2024-31007 0 Buffer Overflow vulnerability in IrfanView 32bit v.4.66 allows a local attacker to cause a denial of service via a crafted file. Affected component is IrfanView 32bit 4.66 with plugin formats.dll. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-31007 Join the discussion	CVE Database V5	10/21/2024, 00:00:00 UTC Added: 02/25/2026, 21:46:56 UTC
CVE-2024-44915: n/aCVE-2024-44915 0 An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS). MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-44915 Join the discussion	CVE Database V5	08/28/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:02 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional